User Manual

Manage Device Security
601
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual
The relevant matching conditions for L4 port numbers are as follows:
• Equal. IP ACL rule matches only if the Layer 4 source port number is equal to
the specified port number or port key.
• Less Than. IP ACL rule matches if the Layer 4 source port number is less
than the specified port number or port key.
• Greater Than. IP ACL rule matches if the Layer 4 source port number is
greater than the specified port number or port key.
• Not Equal. IP ACL rule matches only if the Layer 4 source port number is not
equal to the specified port number or port key.
- If you select the Range radio button, the IP ACL rule matches only if the Layer 4
source port number is within the specified port range. The starting port, ending
port, and all ports in between are a part of the Layer 4 port range.
The Start Port and End Port fields identify the first and last ports that are part of
the port range. They values can range from 0 to 65535.
Select Other from the menu to enter port numbers. If you select Other from the
menu but leave the fields blank, it means any.
The wildcard mask determines which bits are used and which bits are ignored. A
wildcard mask of 0.0.0.0 indicates that none of the bits are important. A wildcard
of 255.255.255.255 indicates that all of the bits are important.
• Dst. In the Dst field, enter a destination IP address, using dotted-decimal notation, to
be compared to a packet’s destination IP address as a match criteria for the selected
IP ACL rule:
- If you select the IP Address radio button, enter an IP address with a relevant
wildcard mask to apply this criteria. If this field is left empty, it means any.
- If you select the Host radio button, the wildcard mask is configured as 0.0.0.0. If
this field is left empty, it means any.
The wildcard mask determines which bits are used and which bits are ignored. A
wildcard mask of 0.0.0.0 indicates that none of the bits are important. A wildcard
of 255.255.255.255 indicates that all of the bits are important.
• Dst L4. The options are available only when protocol is set to TCP or UDP. Use the
destination L4 port option to specify relevant matching conditions for L4 port numbers
in the extended ACL rule.
You can select either the Port radio button or the Range radio button:
- If you select the Port radio button, you can either select port key from the menu
or enter the port number yourself.
• The destination IP TCP port names are bgp, domain, echo, ftp, ftpdata, http,
smtp, snmp, Telnet, www, pop2, pop3.
• The destination IP UDP port names are domain, echo, ntp, rip, snmp, tftp,
time, who.